This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/h1nd4Qn-NC3F4blTzKUQQVdDcGU.roa File: h1nd4Qn-NC3F4blTzKUQQVdDcGU.roa (raw, json) Hash identifier: lz23Y5PvDIkn6cwsXMHaDyiIabMEIIObGoga2OQiexA= Subject key identifier: 87:59:DD:E1:09:FE:34:2D:C5:E1:B9:53:CC:A5:10:41:57:43:70:65 Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca Certificate serial: 019B77C7528DF0EB9D6BBE1D013CFF1064A5 Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/h1nd4Qn-NC3F4blTzKUQQVdDcGU.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202728 IP address blocks: 2001:67c:a7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:52:8d:f0:eb:9d:6b:be:1d:01:3c:ff:10:64:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8759dde109fe342dc5e1b953cca5104157437065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:2a:f9:84:e3:3c:1c:17:df:23:cb:89:02: 09:ea:ce:33:97:d8:e4:88:cf:66:5b:bb:b8:43:5a: 15:81:89:c8:30:1f:4a:10:64:07:68:7a:66:71:60: 64:7f:da:69:bb:8e:8f:22:e2:35:58:1a:b7:e8:83: cb:00:27:f5:65:90:81:15:32:c1:19:f4:e6:c7:62: 75:66:b5:d3:14:b0:96:5c:15:08:d7:9a:68:0f:f5: 25:c2:54:f1:4d:94:51:12:59:db:8f:e9:01:c1:50: c1:c6:65:4a:8c:f8:60:a5:50:89:1d:7b:04:e4:7c: 7e:d7:6d:aa:da:d2:62:97:81:c1:02:68:a5:13:fc: cb:7b:dc:c7:e2:c5:aa:ba:7b:4e:b0:9d:a7:ed:2d: 0f:b2:96:07:36:ac:77:72:70:62:a3:e4:7b:a2:23: 71:01:5d:e0:ad:70:6b:c8:df:ca:2c:8d:52:d1:52: c8:af:a9:d0:41:da:4b:f3:04:2f:ac:3f:e1:b3:82: 87:93:2e:cd:51:6d:b5:52:c1:9c:4e:7e:7b:a3:df: 10:cd:b9:8b:65:c9:a1:38:6f:76:d2:a2:b2:cb:8f: 2b:ad:cf:22:64:4e:6f:27:20:83:62:3e:4f:00:6d: ab:49:cd:44:1b:13:10:ed:cb:63:3e:e1:67:c7:43: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:59:DD:E1:09:FE:34:2D:C5:E1:B9:53:CC:A5:10:41:57:43:70:65 X509v3 Authority Key Identifier: keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/h1nd4Qn-NC3F4blTzKUQQVdDcGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:a7c::/48 Signature Algorithm: sha256WithRSAEncryption 53:3e:13:70:2c:91:fb:b1:07:2e:7d:9f:03:cb:43:38:a0:e4: ce:89:6d:80:59:22:7d:17:15:6f:2c:0e:fd:06:11:86:fe:26: 5a:e2:8c:55:43:d1:d4:65:8a:59:8d:08:e8:99:2b:0b:11:92: 70:47:a8:07:a1:92:f5:ee:6f:76:69:3b:0a:d6:5b:52:6d:ab: 0d:21:d9:b2:80:90:c0:3f:60:88:9d:7c:b2:34:13:a6:e9:35: 8e:ac:6a:79:30:94:e6:10:c7:d1:00:d6:24:f0:04:7f:05:63: ca:48:c6:b8:09:68:55:51:99:56:42:2b:71:d4:69:75:ad:0f: 0c:14:c2:1d:21:7d:96:10:a8:7a:74:55:07:03:fd:63:12:bf: 74:02:7f:6e:32:03:53:ff:65:fe:5f:0b:29:2d:c0:d2:a1:9d: 71:bc:da:12:31:1f:fd:b1:98:00:58:6e:08:9b:2f:af:9c:4f: d3:ff:b8:75:e1:a5:74:6b:ff:f0:c4:46:90:c3:a3:75:f6:53: 8e:62:4a:ab:7c:35:47:0e:77:29:33:5e:10:25:4c:75:bd:2e: 65:0c:5a:2d:6e:9b:5b:dc:50:c0:31:f6:7c:4a:21:92:38:02: 0d:92:96:6c:c7:6a:64:83:e5:6d:f3:e3:aa:77:e8:8b:3d:37: 9e:24:f1:68 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3x1KN8Ouda74dATz/EGSlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZjAwOTlhZDg2ZGQ4NDM0ZTUyZjhjNmZkZGVlYjJjM2Vk NmM2Y2EwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzU5ZGRlMTA5ZmUzNDJkYzVlMWI5NTNjY2E1MTA0MTU3NDM3MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqikq+YTjPBwX3yPLiQIJ6s4zl9jk iM9mW7u4Q1oVgYnIMB9KEGQHaHpmcWBkf9ppu46PIuI1WBq36IPLACf1ZZCBFTLB GfTmx2J1ZrXTFLCWXBUI15poD/UlwlTxTZRRElnbj+kBwVDBxmVKjPhgpVCJHXsE 5Hx+122q2tJil4HBAmilE/zLe9zH4sWquntOsJ2n7S0PspYHNqx3cnBio+R7oiNx AV3grXBryN/KLI1S0VLIr6nQQdpL8wQvrD/hs4KHky7NUW21UsGcTn57o98QzbmL ZcmhOG920qKyy48rrc8iZE5vJyCDYj5PAG2rSc1EGxMQ7ctjPuFnx0NFmQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFIdZ3eEJ/jQtxeG5U8ylEEFXQ3BlMB8GA1UdIwQY MBaAFKPwCZrYbdhDTlL4xv3e6yw+1sbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYt ZDUxNjdlNjc1NmI2LzEvaDFuZDRRbi1OQzNGNGJsVHpLVVFRVmREY0dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYtZDUxNjdlNjc1NmI2 LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAp8 MA0GCSqGSIb3DQEBCwUAA4IBAQBTPhNwLJH7sQcufZ8Dy0M4oOTOiW2AWSJ9FxVv LA79BhGG/iZa4oxVQ9HUZYpZjQjomSsLEZJwR6gHoZL17m92aTsK1ltSbasNIdmy gJDAP2CInXyyNBOm6TWOrGp5MJTmEMfRANYk8AR/BWPKSMa4CWhVUZlWQitx1Gl1 rQ8MFMIdIX2WEKh6dFUHA/1jEr90An9uMgNT/2X+XwspLcDSoZ1xvNoSMR/9sZgA WG4Imy+vnE/T/7h14aV0a//wxEaQw6N19lOOYkqrfDVHDncpM14QJUx1vS5lDFot bptb3FDAMfZ8SiGSOAINkpZsx2pkg+Vt8+Oqd+iLPTeeJPFo -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:25 2026 by rpki-client